Authenticator management

This section explains how to manage FIDO authenticator credentials using the authenticator admin API.

The authenticator admin API provides comprehensive operations for managing FIDO credentials throughout their lifecycle.

The authenticator admin API allows you to:

• List authenticators: Retrieve all credentials for a specific user or device.
• Get authenticator: Retrieve detailed information about a specific credential.
• Update authenticator: Modify credential properties such as friendly names.
• Delete authenticator: Remove a specific credential.
• Delete authenticators: Remove multiple credentials based on search criteria.

Authentication and authorization

All authenticator admin API operations require proper authentication:

• Operations require specific roles encoded in the JWT token passed as an HTTP Authorization request header with the Bearer authorization scheme.
• Each operation specifies the required role in its API documentation.

Next steps

• Review the authenticator admin API reference for detailed endpoint documentation.
• Learn about user management.
• Explore policy management.